ISO9001 System Document Package (48) | Management Record Form Templates: Goal Decomposition, Internal Audit, Management Review, and Corrective Action

Document Description: This document is a collection of fourth-level documents (record forms), providing a unified format for "management" records to serve the requirements of ISO 9001:2015 clauses 6.2 "Quality objectives and planning to achieve them," 9.2 "Internal audit," 9.3 "Management review," 10.2 "Nonconformity and corrective action," and 7.5.3 "Control of documented information." The second-level procedure documents "Quality Policy and Quality Objectives Management Procedure," "Internal Audit Procedure," "Management Review Procedure," and "Nonconformity and Corrective Action Procedure" specify "who does what, when, and to what extent." This document standardizes these activities into printable or Excel-replicable tables, answering questions like "which column should this be filled in, and does not filling in this column count as a nonconformity?" It is suitable for manufacturing, assembly, engineering service, and inspection and testing companies that are establishing or revising their ISO 9001 system, as well as for certified companies with scattered records and inconsistent forms across different workshops. When using this document, ensure that the third-level document "Record Filling and Archiving Work Instruction" has been published. Once approved, the forms become controlled records and must not be altered without authorization.

1. Purpose

To standardize the headers, fields, judgment criteria, and archiving requirements of management records, ensuring:

a) No Omissions in Columns: Key information for goal decomposition, internal audit, management review, and corrective action activities is captured in a fixed format, preventing loss due to personnel changes and eliminating the issue of "verbal instructions that cannot be traced afterward";

b) First-Time Correctness: The meaning of each field, the timing of filling, the responsible position, and examples are clear, allowing new system specialists to fill out forms that can be accepted during audits;

c) Judgment Criteria: Whether goals are met, the severity of nonconformities, and the effectiveness of measures are all filled out according to the embedded judgment rules in the forms, avoiding subjective flexibility;

d) Closed-Loop Visibility: The chain from goals → planning → inspection → nonconformities → corrective action → verification → management review is connected in the same set of forms, allowing one to identify any broken links by reviewing the forms;

e) Audit Evidence: Evidence required for certification audits, customer on-site audits, and group internal audits can be retrieved within 5 minutes using the form numbers, and records cross-reference and corroborate each other;

f) Controlled Efficiency: The total workload for filling out management records is controlled within a manageable range, preventing the issue of "filling out forms for the sake of filling out forms" due to overly complex forms.

2. Scope of Application

2.1 This template set includes the following 8 management record forms, covering the main evidence chain for the operation of a management system:

2.2 Applicable Scenarios:

a) Organizations establishing a system for the first time, building a management record system from scratch;

b) Certified organizations revising, expanding, or merging sites, standardizing the form formats of different plants or business units;

c) Group audits of subsidiaries, using a unified audit form format;

d) Preparing for second-party customer audits, checking the completeness of the evidence chain.

2.3 Boundaries with Other Documents: This document only provides the form structure. The substantive content required by the clauses (such as the inputs that must be covered in a management review) is specified in the corresponding procedure documents. If there is a discrepancy between the two, the procedure document should be followed, and a form revision request should be submitted to the System Office.

2.4 Not Applicable: Operation records such as product inspection, equipment inspection, and training sign-in use other record form template sets like "Equipment Measurement," "Human Resources," and "Production Inspection," which are not within the scope of this document.

3. Responsibilities

3.1 General Manager: Approves annual quality goals, management review plans, and management review reports; provides human and time resources for internal audits and management reviews; makes decisions on major nonconformities and resource needs.

3.2 Management Representative: Reviews the rationality of quality goal decomposition; organizes and chairs management reviews; appoints internal audit team leaders, approves internal audit plans and reports; resolves cross-departmental goal discrepancies and resource gaps.

3.3 System Office (Quality Department): The custodian and maintainer of this set of forms; distributes controlled forms and recovers old versions; aggregates data from various departments for management reviews; spot-checks the quality of form filling; retains and archives management records according to the specified retention periods.

3.4 Department Heads: Accept departmental indicators based on the goal decomposition form and submit monthly data; provide evidence for internal audits; complete corrective actions on schedule and submit verification materials; participate in management reviews and provide input.

3.5 Internal Audit Team Leader / Internal Auditors: Compiles internal audit plans and checklists; objectively records audit findings; issues nonconformity reports and is responsible for the factual descriptions; tracks measure verification and compiles internal audit reports.

3.6 Record Filler: Fills out forms in a timely, accurate, and clear manner; does not sign on behalf of others, does not backfill, and does not alter (if changes are needed, they should be handled by "strikethrough + signature + date").

4. Work Procedures

4.1 General Form Setting Rules

4.1.1 Nine Header Elements: Record name, form number, version number, effective date, organization name, page number/total pages, filler, fill date, approver. Any management record lacking a header is considered uncontrolled, and internal auditors can directly issue a nonconformity.

4.1.2 Retention Period: Management review and internal audit records are retained for 3 years (or extended as required by customer contracts, such as 5 years for the automotive industry); goal achievement statistics forms are retained for 3 years; corrective action forms are retained for 3 years after the measures are verified to be effective. The retention period must be printed in the footer of the form.

4.1.3 Number Continuity: Internal audit-related records use "year + sequence number," such as 2026-IA-01; corrective action forms use "year + department code + sequence number," such as 2026-CA-PR-007. Skipping or duplicating numbers is prohibited.

4.1.4 Filling Tools: Paper forms are filled out with non-fading ink pens; electronic forms must have "filler" and "approver" fields with clear approval records (email approval or system approval screenshots attached).

4.2 Form 1: Annual Quality Goal Decomposition and Monthly Achievement Statistics Form (QR-QM-01)

Field List: No. | Company-Level Goal | Indicator Definition/Calculation Formula | Target Value | Statistical Cycle | Responsible Department | Department-Level Decomposition Value | Data Source | Statistical Responsible Person | Actual Values (Jan-Dec) | Cumulative Achievement Rate | Judgment (Achieved/Not Achieved) | Reason for Non-Achievement and Countermeasure Number.

Filling Instructions:

a) "Indicator Definition/Calculation Formula" must clearly specify the numerator, denominator, and statistical criteria, for example, "First-time inspection pass rate = number of batches passed first-time inspection ÷ total number of batches inspected × 100%." Only the name is not allowed;

b) Target values must be quantifiable and comparable, avoiding vague statements like "significant improvement" or "basically satisfactory";

c) The sum of department-level decomposition values should not be less than the company-level goal, allowing for upward adjustments but not downward;

d) Monthly data must be reported within 5 working days of the end of the month, aggregated by the System Office and sent to the Management Representative;

e) If a goal is not met for two consecutive months or the cumulative achievement rate is below 95% of the target value, a corrective action form must be triggered and its number filled in.

Example Row:

4.3 Form 2: Management Review Plan (QR-QM-02)

Field List: Review year | Review date and time slot | Location/form (on-site/video) | Chairperson | Participants and sign-in column | Review purpose | Review basis (standard clauses, procedure documents, customer and regulatory requirements) | List of review inputs and respective responsible persons, submission deadlines | Meeting agenda and time allocation | Output requirements (resolution items, resource needs, improvement opportunities) | Approval signature column | Distribution range.

Filling Instructions:

a) Input items must cover all clauses of 9.3.2, with specific responsible persons and submission deadlines to avoid last-minute data collection;

b) The plan should be distributed to participants 10 working days before the review meeting, and all input materials should be collected 3 working days before the meeting;

c) Participants must include department heads related to the agenda items, with the General Manager and Management Representative as mandatory attendees;

d) The review frequency should be at least once a year, with additional temporary reviews in case of major quality incidents, batch customer complaints, or significant organizational changes.

4.4 Form 3: Management Review Input Summary and Review Report (QR-QM-03)

Field List (Report Sections): 1. Review time, location, and participants; 2. Implementation status of previous review resolutions (list "resolution—responsible person—completion status—reason for non-completion" for each item); 3. Overall evaluation of system operation; 4. Changes in external and internal factors (including stakeholder demand changes); 5. Achievement and trend analysis of quality goals; 6. Customer satisfaction and complaint analysis; 7. Results of internal and external audits; 8. Process performance and product conformity; 9. Status of nonconformities and corrective actions; 10. Resource adequacy (human, equipment, measurement, knowledge); 11. Effectiveness of risk and opportunity response measures; 12. Improvement opportunities and resolution items (including responsible persons and completion deadlines); 13. Conclusion (judgment of the system's ongoing suitability, adequacy, and effectiveness); approval column.

Filling Instructions:

a) Each section must be supported by data, and the source of any referenced data must be cited (e.g., "see QR-QM-01, row 9");

b) Resolution items must specify responsible persons, deliverables, and completion dates, with the next review's first item being the check of their completion status;

c) The report must be approved and distributed within 10 working days after the meeting, and the distribution record should be archived with the report;

d) The conclusion cannot simply state "the system is operating effectively"; it must provide a clear judgment and explain the basis.

4.5 Form 4: Annual Internal Audit Plan (QR-AU-01)

Field List: Audit year | Audit purpose and scope (including product lines, sites, clauses, and department boundaries) | Audit criteria (ISO 9001:2015, system documents, customer requirements, applicable regulations) | Audit frequency schedule (concentrated or rolling, with specific times) | Audit team composition (team leader, members, professional qualifications, whether to avoid auditing their own department) | Matrix of audited departments and corresponding clauses | Planned person-days and schedule | Resource needs | Compilation/Review/Approval signature column | Distribution range.

Filling Instructions:

a) Internal auditors must not audit their own department's work, and the matrix must explicitly show the avoidance relationships;

b) Rolling audits must ensure full coverage of all clauses and departments throughout the year, with each coverage range annotated in the plan;

c) The plan should be approved and published within January each year. If significant changes occur (such as new product lines or major customer complaints), the plan can be revised and the revision record retained.

4.6 Form 5: Internal Audit Checklist (QR-AU-02)

Field List: Audited department | Clause number | Auditor | Date | Inspection items (clause requirements converted into questions) | Audit method (ask/check/observe/test) | Sampling objects and quantities | Objective evidence (record name and number) | Conformity judgment (conform/nonconform/observation item/not applicable) | Description of nonconformity facts | Number reference.

Filling Instructions:

a) Inspection items should be written in "question form" to avoid directly copying standard clauses; for example, for 7.5.3, write "Please show the application, approval, and distribution records for the last three document changes, and explain how old versions were recovered";

b) Sampling should cover three different time periods or different work teams to avoid checking only a "model record";

c) Objective evidence must specify the record name, number, and date; writing "checked several records" is considered invalid evidence;

d) The checklist is a process record and must be archived together with the internal audit report; it cannot be backfilled after the fact.

4.7 Form 6: Nonconformity Report (QR-AU-03)

Field List: Report number | Audited department | Auditor | Audit date | Description of nonconformity facts (time, location, position, record number, exact words or original data) | Violated criteria clauses (standard clause number + system document clause number) | Nonconformity type (serious/general/observation item) | Cause analysis (filled by the responsible department, including 5Why or fishbone diagram) | Immediate corrective action (immediate disposal measures) and completion date | Preventive corrective action (to prevent recurrence) and completion date | Responsible person | Verification method and conclusion | Verifier/date | Signature column.

Filling Instructions:

a) The fact description must be "reproducible": a third party should be able to judge whether the clause was indeed violated based solely on this text, avoiding conclusory statements like "disorganized document management" or "inadequate training";

b) One nonconformity report should describe only one fact; multiple issues should not be combined into a single report;

c) Serious nonconformity judgment: if a system clause is out of control, leading to batch nonconformities or causing customer losses, or if the same general nonconformity recurs more than three times;

d) The completion deadline for corrective actions is generally no more than 30 working days, and any extension must be documented and approved;

e) The verification conclusion can only be "effective/ineffective/partially effective." If the verification is ineffective, new measures must be issued.

Example Row (Non-Empty Fields):

4.8 Form 7: Internal Audit Report (QR-AU-04)

Field List: Audit number | Audit purpose, scope, and criteria | Audit date | Audit team and audited party representatives | Overview of the audit process (departments covered, clauses, sample size) | Summary of audit findings (highlights of conformities, list and distribution of nonconformity numbers) | Evaluation of system effectiveness | Status of corrective actions for previous nonconformities | Conclusion and recommendations | Report distribution range | Approval column.

Filling Instructions:

a) The distribution of nonconformities should be presented in a table with a cross-departmental × clause format to easily identify weak points;

b) The conclusion should answer whether the system is continuously compliant and effectively implemented, and explain the reasons for any uncovered clauses;

c) The report should be completed within 5 working days after the closing meeting and archived together with the checklists and nonconformity reports.

4.9 Form 8: Corrective Action Form (QR-CA-01, 8D Simplified Version)

Field List: Number | Source (internal audit/external audit/customer complaint/process anomaly/management review) | Problem description and impact scope | Immediate corrective action (containment measures) and executor, completion time | Root cause analysis (5Why or fishbone diagram, filled layer by layer) | Escaped cause (why it was not detected in-house) | Systemic cause (why the system did not prevent it) | Corrective actions (itemized: action content, responsible person, completion date, verification method, verifier) | Effectiveness verification (verification data and conclusion) | Standardization (whether documents, training, or poka-yoke are updated) | Horizontal deployment to other production lines/products | Closure signature column.

Filling Instructions:

a) Immediate corrective actions and root cause analysis must not be mixed: replacing defective items is a disposal action, not a corrective measure;

b) Each action must specify a unique responsible person and a completion date; shared responsibility is considered no responsibility;

c) After implementing measures, there must be "verification data," such as PPM trends, re-inspection results, and defect rate comparisons. Writing "rectified" or "trained" is not considered valid verification;

d) Within 3 months after closing the measures, similar issues should be rechecked. If they recur, the measures are considered ineffective, and the process should be restarted.

4.10 Management Record Closed-Loop Process (Text Version)

Step 1: Goal Planning: At the beginning of the year, the Management Representative organizes the setting of company-level goals, which are decomposed to departments using QR-QM-01 and approved by the General Manager → Step 2: Process Monitoring: Each responsible department reports data within 5 working days of the end of each month, aggregated by the System Office. Non-achievement items trigger QR-CA-01 → Step 3: Internal Audit: Implemented according to the QR-AU-01 plan, with internal auditors using QR-AU-02 to gather evidence and issuing QR-AU-03 for nonconformities → Step 4: Rectification Verification: The responsible department analyzes the cause, implements measures, and the internal auditor verifies and signs off on the conclusion by the deadline → Step 5: Audit Summary: The internal audit team leader compiles QR-AU-04, which is approved by the Management Representative and distributed to relevant departments → Step 6: Management Review: The System Office issues the QR-QM-02 plan before the review, compiles the QR-QM-03 report after collecting all inputs, and gets it approved by the General Manager → Step 7: Resolution Closure: Resolution items are included in the next round of QR-QM-01 goal adjustments and QR-CA-01 measure tracking, forming a closed loop.

5. Related Records

6. Related Documents

a) Record Control Procedure (second-level document, specifying requirements for record identification, storage, protection, retrieval, retention, and disposal);

b) Document Control Procedure (second-level document, specifying rules for form compilation, approval, distribution, changes, and obsolescence);

c) Quality Policy and Quality Objectives Management Procedure (second-level document, specifying rules for goal decomposition and statistical criteria);

d) Internal Audit Procedure (second-level document, specifying requirements for internal audit planning, implementation, reporting, and verification);

e) Management Review Procedure (second-level document, specifying requirements for management review inputs, outputs, and resolution tracking);

f) Nonconformity and Corrective Action Procedure (second-level document, specifying requirements for nonconformity classification, measure formulation, and effectiveness verification);

g) Record Filling and Archiving Work Instruction (third-level document, specifying the pen for filling, change methods, archiving paths, and borrowing rules);

h) Data Analysis and Statistical Tool Application Guide (third-level document, specifying tools for goal data statistics and trend analysis).

Usage Instructions

1. How to Modify According to Actual Company Needs

1. Adjust responsibility columns according to the organizational structure, but do not change judgment columns. Small companies with 30-40 employees can merge the "System Office" function into the Quality Department or the General Manager's Office, and combine the "internal audit team leader and auditors" into one person. However, the goal formulas, nonconformity classification, and verification conclusion judgment rules should be retained, as these are the most critical parts for audits.

2. Adjust sampling criteria according to product type. For single-piece, small-batch production companies (such as custom equipment), change "batch pass rate" to "first-time project acceptance rate." For service organizations, replace "production workshops" with "service delivery sites" and "equipment downtime" with "service fulfillment delays."

3. Delete forms but not evidence for small and micro enterprises. Small and micro enterprises can combine QR-QM-02 and QR-QM-03 into a single "Management Review Record" form, but the plan elements (time, participants, input items, responsible persons) and report elements (input summary, resolutions, conclusions) must be complete, not just a one-page meeting summary.

4. Strengthen according to customer and industry requirements. Customers in industries such as automotive, medical devices, and aerospace often have additional requirements. Add a "Customer Special Requirements" column at the end of the form to incorporate additional inputs from IATF 16949 and ISO 13485 into the same management review report.

5. Electronic Transformation. When using ERP or OA forms, retain "filler + approver + timestamp" and ensure that exported records are readable, printable, and equivalent to paper archives. Records of system changes and data migrations should also be managed as controlled records.

2. Audit Focus Points

1. Whether goals are decomposed to departments with calculation formulas, and whether the sum of the decomposition values of 10 departments supports the company-level goal;

2. Whether monthly data is continuous and complete, and whether the achievement judgment is based on evidence;

3. Whether management review inputs cover all clauses of 9.3.2, and whether any clauses are omitted;

4. Whether management review resolutions specify responsible persons, deadlines, and the verification of completion status in the next review;

5. Whether internal auditors avoid auditing their own departments, and whether rolling audits cover all clauses throughout the year;

6. Whether nonconformity descriptions are specific and reproducible, and whether cause analysis touches on systemic issues rather than just "employee negligence";

7. Whether measure verification is supported by data and conducted by non-implementers, and whether similar issues recur;

8. Whether references between records are consistent (whether the nonconformity numbers in the internal audit report can be found in the corresponding corrective action forms);

9. Whether the form version is the current valid version, and whether old versions have been recovered.

3. Common Errors

1. Goals are only named without formulas. "Customer satisfaction ≥ 95%" without specifying the survey criteria and response rate, leading to inconsistent monthly data and inability to recalculate during audits. Countermeasure: The formula field in the goal form is a mandatory field, and blank forms should be returned.

2. Management reviews become departmental reporting meetings. Departments read PPTs, leaving the output column blank with no resolutions or responsible persons. Countermeasure: The "resolution items" section in the report template is mandatory, and if there are no resolutions, it must state "no changes required after evaluation" and provide the basis.

3. Internal audit checklists are copied directly from standards. Inspection items are the exact clause texts, and auditors merely check boxes. Countermeasure: Inspection items should be rewritten as questions, and each audit should sample at least three different time periods.

4. Nonconformity reports are opened but not closed. Dozens of reports are issued, but the verification columns remain blank, and the same issues are found in the next internal audit. Countermeasure: The System Office should monthly track the on-time closure rate of measures, and if it is below 90%, it should be discussed in the management review.

5. Corrective actions are written as "strengthen inspection" or "strengthen training." Measures are not related to root causes, and issues recur. Countermeasure: Measures must correspond to root cause clauses and prioritize technical means such as poka-yoke, parameter fixation, and system interception.

6. Verbal instructions replace records. Goal adjustments, plan changes, and measure extensions are done verbally, and no records are visible. Countermeasure: All changes must be documented through form revisions or accompanied by change explanations and signatures.

7. Records are backfilled after the fact. Internal audit checklists are filled out uniformly after the audit, with discrepancies in ink color and dates. Countermeasure: Checklists should be filled out on-site, and the System Office should spot-check the consistency of ink color and dates.

8. Form versions are chaotic. Different workshops use forms from different years, with varying numbers of columns, requiring manual reorganization during aggregation. Countermeasure: Form numbers and version numbers should be printed in the header, and old versions should be recovered and registered during version changes.

9. Retention periods do not match actual practices. Forms state a 3-year retention period, but they are discarded after one year, making it impossible to trace last year's records during internal audits. Countermeasure: The archiving list should clearly specify the box numbers and destruction dates for various records, and destruction must be approved and documented.

Proper header design ensures that records are not just formalities.

Knowledge code: 2.3.1

Version: v20260809

Author: QTank QTank is dedicated to providing systematic knowledge, methodologies, and practical tools for quality management professionals, helping companies continuously improve their quality capabilities.